| Название | Dice CMS V3.1.0 Cross-Site Scripting |
|---|
| Описание | XSS attacks can be used to steal sensitive information from users, such as session tokens, cookies, or personal data. Attackers can inject malicious scripts that send this information to their own servers, effectively compromising user accounts and privacy.In the Dice CMS system, it's possible to steal the administrator's cookie, thereby taking over the account. |
|---|
| Источник | ⚠️ https://github.com/fubxx/CVE/blob/main/DiceCMS-XSS.md |
|---|
| Пользователь | LIYU (UID 67244) |
|---|
| Представление | 03.04.2024 10:06 (3 лет назад) |
|---|
| Модерация | 12.04.2024 08:42 (9 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 260474 [bihell Dice 3.1.0 Comment межсайтовый скриптинг] |
|---|
| Баллы | 18 |
|---|